Libreswan 4.15 fixes a vulnerability allowing DoS

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Libreswan 4.15 fixes a vulnerability allowing DoS

Libreswan VPN 4.15 fixes a medium-severity vulnerability [1]. If an update cannot be performed, a patch has been released [2].

Libreswan - DoS (CVE-2024-3652)

CVSS 6.5 (Medium)

An attacker can send a malicious request for an AES-GMAC proposal in combination with the IKEv1 protocol loaded with default AH/ESP settings without an "esp" line specified. Due to a flaw in the compute_proto_keymat() function, this leads to a process restart. If such a connection is initiated automatically at startup using the "auto=" keyword, the attacker can cause repeated crashes and a denial of service [1].

The vulnerability is present in product:

libreswan; >=3.22, <=4.14

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

More information:

CVE-2024-3652 at cve.org, NVD
CWE-248 at cwe.mitre.org

The vulnerability was publicly disclosed 15. 4. 2024.

Links

By CESNET, z.s.p.o. Michaela Jarošová on 25. 4. 2024.

Report feedback

[TLP:CLEAR] Libreswan 4.15 fixes a vulnerability allowing DoS

Libreswan - DoS (CVE-2024-3652)

CVSS 6.5 (Medium)

Links